ssl_crtd助手在鱿鱼中崩溃得太快了

我正在使用squidsslBump和dynamicSSL证书生成function,下面是我对sslBump的configuration

sslcrtd_program / usr / lib64 / squid / ssl_crtd -s / usr / local / squid / var / lib / ssl_db -M 4MB sslcrtd_children 5

sslproxy_cert_error允许全部

always_direct全部允许

ssl_bump client-first all

sslproxy_cert_error允许全部

sslproxy_flags DONT_VERIFY_PEER

http_port 3128 ssl-bump generate-host-certificates = on dynamic_cert_mem_cache_size = 4MB cert = / etc / squid / ssl / myCA.pem

当我开始鱿鱼时,我正面临着错误。

鱿鱼-d 23

 2014/08/29 16:55:59 kid1 | 将当前目录设置为/ var / cache / squid
 2014/08/29 16:55:59 kid1 | 为x86_64-redhat-linux-gnu启动Squidcaching版本3.4.4.2 ...
 2014/08/29 16:55:59 kid1 | 进程ID 32150
 2014/08/29 16:55:59 kid1 | 过程angular色:工人
 2014/08/29 16:55:59 kid1 | 有1024个文件描述符可用
 2014/08/29 16:55:59 kid1 | 正在初始化IPcaching...
 2014/08/29 16:55:59 kid1 | 在[::] FD 7创build的DNS套接字
 2014/08/29 16:55:59 kid1 | 在0.0.0.0创buildDNS套接字,FD 8
 2014/08/29 16:55:59 kid1 | 从/etc/resolv.conf中添加域elitecore.co.in
 2014/08/29 16:55:59 kid1 | 从/etc/resolv.conf中添加域elitecore.co.in
 2014/08/29 16:55:59 kid1 | 从/etc/resolv.conf中添加名称服务器203.88.135.194
 2014/08/29 16:55:59 kid1 | 从/etc/resolv.conf中添加nameserver 4.2.2.2
 2014/08/29 16:55:59 kid1 |  helperOpenServers:启动5/5'ssl_crtd'进程
 2014/08/29 16:55:59.339 kid1 |  ErrorDetailManager.cc(254)parsing:保留大小:72内容:名称:X509_V_ERR_AKID_SKID_MISMATCH
详细信息:“%ssl_error_descr:%ssl_subj
 2014/08/29 16:55:59.341 kid1 |  ErrorDetailManager.cc(254)parsing:保留大小:125内容:名称:X509_V_ERR_APPLICATION_VERIFICATION
详细信息:“%ssl_error_descr:%ssl_subject”
 descr:“应用程序validation失败”

 2014/08/29 16:55:59.341 kid1 |  ErrorDetailManager.cc(254)parsing:保留大小:0内容: 
 2014/08/29 16:55:59.341 kid1 | 日志文件:打开日志守护进程:/var/log/squid/access.log
 2014/08/29 16:55:59.341 kid1 | 日志文件守护进程:打开日志/var/log/squid/access.log
 2014/08/29 16:55:59.341 kid1 | 本地caching摘要启用; 每3600/3600秒重build/重写
 2014/08/29 16:55:59.341 kid1 | 禁用存储日志logging
 2014/08/29 16:55:59.341 kid1 | 交换maxSize 0 + 262144 KB,估计20164个对象
 2014/08/29 16:55:59.341 kid1 | 目标桶数:1008
 2014/08/29 16:55:59.341 kid1 | 使用8192个存储桶
 2014/08/29 16:55:59.341 kid1 | 最大内存大小:262144 KB
 2014/08/29 16:55:59.341 kid1 | 最大交换大小:0 KB
 2014/08/29 16:55:59.341 kid1 | 使用最小负载存储目录select
 2014/08/29 16:55:59.341 kid1 | 将当前目录设置为/ var / cache / squid
 k kill2014 / 08/29 16:55:59.341 kid1 | 完成加载MIMEtypes和图标。
 2014/08/29 16:55:59.427 kid1 |  AsyncCall.cc(18)AsyncCall:构造的AsyncCall clientListenerConnectionOpened,this = 0x7ff9b784a900 [call18]
 2014/08/29 16:55:59.427 kid1 |  AsyncCall.cc(85)ScheduleCall:StartListening.cc(56)将调用clientListenerConnectionOpened(local = [::]:3128 remote = [::] FD 21 flags = 9,err = 0,HTTP Socket port = 0x7ff9b727c528)[call18 ]
 2014/08/29 16:55:59.427 kid1 |  HTCP禁用。
 2014/08/29 16:55:59.427 kid1 | 加载的Squid插件模块:0
 2014/08/29 16:55:59.427 kid1 | 适应支持是closures的。
 2014/08/29 16:55:59.428 kid1 |  AsyncCallQueue.cc(51)fireNext:inputclientListenerConnectionOpened(local = [::]:3128 remote = [::] FD 21 flags = 9,err = 0,HTTP Socket port = 0x7ff9b727c528)
 2014/08/29 16:55:59.428 kid1 |  AsyncCall.cc(30)make:make call clientListenerConnectionOpened [call18]
 2014/08/29 16:55:59.428 kid1 | 在local = [::]:接受SSL冲突的HTTP Socket连接:3128 remote = [::] FD 21 flags = 9
 2014/08/29 16:55:59.429 kid1 |  AsyncCallQueue.cc(53)fireNext:离开clientListenerConnectionOpened(local = [::]:3128 remote = [::] FD 21 flags = 9,err = 0,HTTP Socket port = 0x7ff9b727c528)
 2014/08/29 16:55:59.429 kid1 | 警告:ssl_crtd#Hlpr0退出
 2014/08/29 16:55:59.429 kid1 | 太less的ssl_crtd进程正在运行(需要1/5)
 2014/08/29 16:55:59.429 kid1 | closuresHTTP端口[::]:3128
 2014/08/29 16:55:59.429 kid1 |  storeDirWriteCleanLogs:开始...
 2014/08/29 16:55:59.429 kid1 | 成品。 写了0个条目。
 2014/08/29 16:55:59.429 kid1 | 花了0.00秒(0.00input/秒)。
致命:ssl_crtd助手崩溃太快,需要帮助!

 2014/08/29 16:55:59.429 kid1 |  helper.cc(625)helperShutdown:helperShutdown:ssl_crtd#Hlpr0 is CLOSING。
 2014/08/29 16:55:59.429 kid1 |  helper.cc(625)helperShutdown:helperShutdown:ssl_crtd#Hlpr0 is CLOSING。
 2014/08/29 16:55:59.429 kid1 |  helper.cc(625)helperShutdown:helperShutdown:ssl_crtd#Hlpr0 is CLOSING。
 2014/08/29 16:55:59.429 kid1 |  helper.cc(625)helperShutdown:helperShutdown:ssl_crtd#Hlpr0 is CLOSING。

是否有任何configuration更改或解决此错误? 用RHEL 6.4和Fedora 18用鱿鱼3.2.3,3.4.4,3.3.1testing

我不认为你给了我们很多用处。 它告诉我们辅助程序正在死亡,而且这个程序或多或less地立即发生,但是并没有告诉我们为什么会死亡。

你可能会使用strace和/或ltrace得到一些线索。 跟踪父进程(可能是squid和分支的subprocess(例如strace -f -p PIDstrace -ff -p PID ),这可能会告诉你这些进程在崩溃前正在做什么。给你一些有用的东西,但通常strace给你你需要的东西。